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Amendments to the claims: 

This listing of claims replaces all prior versions and listings of cMms in the application: 

Listing of claims : 

1. (currently amended) A method for monitoring of communications traffic, comprising: 
recording packet-data communication traffic received from, and passing through, a 

network switch; 

encrypting the packet-data communication traffic after the packet-data communication 
traffic has passed through the network switch to create encrypted data; and 

storing the encrypted data such that the encrypted data can be decrypted only by means of 
decryption keys that exhibit restricted availability. 

2. (previously presented) The method as claimed in Claim 1 further including 
employment of a spare disk and/or CPU capacity within a telecommunications system. 

3. (previously presented) The method as claimed in Claim 1 further including the step of 
including encrypted search conditions within the decryption keys that are made selectively 
available. 

4. (previously presented) The method as claimed in Claim 1, further including the step of 
employing separate levels of authorization for access to the stored data. 

5. (previously presented) The method as claimed in Claim 1, further including the step of 
employing a decryption key that is useable only once. 

6. (previously presented) The method as claimed in Claim 1, further including the step of 
logging all accesses to the stored data to an encrypted secure audit trail. 
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7. (previously presented) The method as claimed in CMm 1, further including a tamper 
detection reference within the encrypted data. 

8. (previously presented) The method as claimed in Claim 1, further including the step of 
monitoring all the available communications traffic. 

9. (previously presented) The method as claimed in Claim 8, wherein the step of storing 
the recorded traffic comprises the step of recording all of the recorded traffic. 

10. (previously presented) The method as claimed in Claim 1, wherein the 
communications traffic to be recorded comprises traffic through a telecommunications switch, 
router or gateway. 

1 1 . (previously presented) The method as claimed in Claim 1, further including the step 
of encrypting details relating to the communications traffic and storing the said encrypted details 

for subsequent access. 

12. (previously presented) The method as claimed in Claim 1. further including the step 
of authorizing use of the required decryption key in a restricted manner. 

13. (currently amended) A system for monitoring of communications traffic, comprising: 
a recorder that records the communications traffic, the communications traffic being 

received by the recorder from a network switch; 

an encryption engine that encrypts the communications traffic after the communications 
traffic has passed through the network switch: and 

a storage device that stores recorded communications traffic as encrypted data, such that 
the encrypted data can be decrypted only by means of keys that exhibit restricted availability. 
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14. (previously presented) The system as claimed in Claim 13 further including 
application software that executes the method steps of anyone or more of Claims 2-12. 

15. (canceled) 

16. (canceled) 

17. (currently amended) A method for monitoring of communications traffic, comprising 
the steps of: 

receiving communications traffic from a network switch; 

encrypting the communications traffic after the packet-data communication traffic has 
passed through the network switch to generate encrypted communications traffic data; 
recording the encrypted communications traffic data; 

storing the recorded encrypted communications traffic data such that the encrypted 

communications traffic data can be decrypted by decryption keys that exhibit restricted 
availability, that allow encrypted search conditions, and that employ separate levels of 
authorization for access to the stored data; and 

encrypting details relating to the communications traffic and storing the said encrypted 
details for subsequent access. 

18. (previously presented) The method as claimed in Claim 17, further including the step 
of employing a decryption key that is useable only once. 

19. (previously presented) The method as claimed in Claim 17, further including the step 
of logging all accesses to the stored data to an encrypted secure audit trail. 
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20. (previously presented) The method as cMmed in Clziim 17, further including a tamper 
detection reference within the encrypted data. 

21. (previously presented) The method as claimed in Claim 17, further including the step 
of monitoring all the available communications traffic. 

22. (previously presented) The method as claimed in Claim 17, wherein the step of 
storing the recorded traffic comprises the step of recording all of the recorded traffic. 



